Ex-NSA Director Admits 'We Kill People Based On Metadata' with Drone Strike

We All now know about the existence of the extensive metadata collection program by U.S National Security Agency NSA, which creates an intimate repository of our lives -- whom we love, whom we’re friends with, where we work, whom we call, when we you, how long we talk over the calls, and how ofte...

NSA Surveillance Reform Demonstrate Need for Public Scrutiny

The Snowden leaks and the ensuing critical spotlight shone on the National Security Agency’s surveillance programs have nudged many technologists, privacy hounds and politicians away from their desks and onto the front lines calling for reforms. Two nights ago, the New York Times reported that...

Edward Snowden nominated for Nobel Peace Prize 2014

Now there is really great news for all the supporters of Former National Security Agency NSA contractor Edward Snowden, as he is nominated for the 2014 Nobel Peace Prize by two Norwegian lawmakers. Snorre Valen and Baard Vegar Solhjell, parliamentarians from Norway’s Socialist Left Party said, “H...

Declassified 2011 FISC Opinion Shows Court Found Some NSA Surveillance Unconstitutional

Newly declassified documents released in response to a Freedom of Information Act request by the EFF show that the secret Foreign Intelligence Surveillance Court in 2011 declared that the National Security Agency’s techniques for collecting upstream Internet communications was unconstitutional an...

Researchers, Vendors Await Google Disclosure Fallout

The endless loop that is the disclosure debate got a jolt of energy yesterday when Google said it would support researchers’ disclosure of details on actively exploited critical vulnerabilities just seven days after the researcher has notified the vendor in question. Google hopes the policy...

Faux, Hacked Apps Continue to Litter Google Play Marketplace, Developer Alleges

Phony, potentially malicious apps are continuing to make their way into Google’s Play marketplace, triggering debate over whether applications are being properly vetted for adhering to the company’s marketplace policies. Developers at the Root Uninstaller Team have called out another app publishe...

Flame Malware Raises Need for Open Talk on Use of Cyberweapons

The discovery of the Flame malware has raised a number of questions, some mundane, some interesting and many unanswerable at this point. But the point that’s most interesting also is the one that likely will go unaddressed for the foreseeable future, and that is, the need for a serious, open...

Climategate 2.0? Popular Climate Blog Hacked, E-mails, Passwords Leaked

The website of Skeptical Science, a blog that is critical of climate change skeptics, was hacked over the weekend, and users’ e-mails, passwords and IP addresses were taken, according to a post on the site Sunday. The bulk of the site’s database was taken, uploaded to a Russian website and linked...

Debate Over Active Defense and Hacking Back Crops Up at RSA

SAN FRANCISCO–The growing stream of attacks in recent years against government agencies, critical infrastructure, utilities and other vital networks has led to an increasingly heated debate around the concept of active defense and targeting the people and groups behind those attacks. That debate...

Joomla! Component A Cool Debate 1.0.3 - Local File Inclusion

Joomla! Component A Cool Debate 1.0.3 - Local File Inclusion A Cool Debate 1.0.3 Component Joomla Local File Inclusion ========================================================================================= - Discovered by : Chip D3 Bi0s - Email : chipdebiosatgmaildotcom - Group : LatinHackTeam...

Joomla A Cool Debate 1.0.3 Local File Inclusion

A Cool Debate 1.0.3 Component Joomla Local File Inclusion ========================================================================================= - Discovered by : Chip D3 Bi0s - Email : chipdebiosatgmaildotcom - Group : LatinHackTeam - Date : 18 june 2011 - Where : From Remote...

Joomla Component com_acooldebate Local File Inclusion

Exploit for php platform in category web applications A Cool Debate 1.0.3 Component Joomla Local File Inclusion ========================================================================================= - Discovered by : Chip D3 Bi0s - Email : chipdebiosatgmaildotcom - Group : LatinHackTeam - Date...

Joomla! Component A Cool Debate 1.0.3 - Local File Inclusion

A Cool Debate 1.0.3 Component Joomla Local File Inclusion ========================================================================================= - Discovered by : Chip D3 Bi0s - Email : chipdebiosatgmaildotcom - Group : LatinHackTeam - Date : 18 june 2011 - Where : From Remote...

On the Disclosure Debate, the Value of Zero Days and the Privacy of Android Phones

In this episode, Ryan Naraine and Dennis Fisher discuss the relative value of the never-ending disclosure debate, the value of zero-days and whether users should be worried about the ability of Google to remotely install apps on Android phones. swf...

This Week In Security: The Full Disclosure Rabbit Hole Re-Opens

Had you gone to sleep in 2004 and woken up three days ago, you’d be forgiven for thinking you’d only slept a few hours instead of a few years. This week saw the inglorious return of not just the full disclosure debate, but also of the heated rhetoric that usually accompanies it. Had you awoken to...

The Berkeley breach: Is SaaS the answer?

One recent Friday afternoon I took time off to visit two new health providers: a new dentist nearer my home and an orthopedic to look at my lateral epicondylitis. In both cases, as a new patient, I filled in page after page of medical history and personal information, including my Social Security...

Virtualization security debate rages on

From SearchSecurity.com Robert Westervelt The debate around cloud security is quickly beginning to mirror the one that has followed virtualization security for the last few years. What begins as a philosophical discussion usually devolves into arguments about technology or vendor roles. In a pane...

Partial disclosure, complete disagreement

The two most highly publicized vulnerability disclosures last year also were the most highly criticized disclosures: Dan Kaminsky’s DNS bug and the SSL flaw discovered by a group of independent and academic researchers. The two events played out in similar fashions, with some details coming out i...